Description
A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0. Impacted is an unknown function of the file /delete.php. Such manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Modern Image Gallery App | 1.0 | — |
References
- VDB-349641 | SourceCodester Modern Image Gallery App delete.php path traversal vdb-entry technical-description
- VDB-349641 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #765591 | SourceCodester Modern Image Gallery App v1.0 Path Traversal third-party-advisory
- https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218 related
- https://gist.github.com/hackusman/e618b915514ed24b9333c72152bb7218#-detailed-proof-of-concept-poc exploit
- https://www.sourcecodester.com/ product